Skip to content
OpenAdvisories

Package · Alpine

botan3

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-34582

    Botan has a TLS 1.3 certificate authentication bypass

    Botan is a C++ cryptography library. Prior to version 3.11.1, the TLS 1.3 implementation allowed ApplicationData records to be processed prior to the Finished message being received. A server which is attempting to enforce client authentication via certificat…

    randombit botan botan botan3 Debian Ubuntu Alpine
  • High 8.2
    CVE-2026-32877

    Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field

    Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value (C3) failed to check that the encoded value was of the expected length prior to comparison. An invalid…

    randombit botan botan botan Debian Ubuntu Alpine